Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          Ft0nG+3XAzqkVITVgGw1/tzychmNmPPMjUN5PJ271yk=
Subject key identifier:   8E:9E:8E:E0:67:9A:17:45:AA:74:3C:5B:65:EB:E0:B5:ED:32:05:92
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       019FAC3F2D5133EE64F43E6D03BFC32705D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 05:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:49 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: eNqNgnJoPtobEJAuES5eAf+zWRzMw/YqriHWUMpEhKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:2d:51:33:ee:64:f4:3e:6d:03:bf:c3:27:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Jul 29 05:00:49 2026 GMT
            Not After : Jul 30 05:00:49 2026 GMT
        Subject: CN=8e9e8ee0679a1745aa743c5b65ebe0b5ed320592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:4b:3c:18:b2:f2:ca:1c:ec:70:a6:b9:84:
                    23:69:8b:fb:f9:96:e0:86:c0:68:c5:bb:b0:11:cb:
                    7f:e2:db:2d:6f:75:79:93:c1:fd:bd:cc:e5:8d:62:
                    d1:11:fb:95:6d:6a:0d:3b:a2:59:2d:eb:f6:ed:4a:
                    cd:14:8f:67:e1:6e:50:12:ad:1d:95:f8:2e:31:8e:
                    a0:df:fa:44:4d:16:86:95:c2:f5:81:c6:d5:09:65:
                    16:9d:f1:6a:df:38:51:5c:ad:78:2a:6e:dd:58:ec:
                    8a:a5:db:90:2b:48:e1:59:5a:b3:93:09:34:08:75:
                    16:05:75:d0:63:d3:4d:f6:ce:7e:25:dd:09:e4:e7:
                    55:83:d6:7f:da:75:d2:d2:f3:aa:b6:eb:4a:14:78:
                    2d:14:95:f2:5f:90:c1:1f:3d:03:d9:0e:a3:12:4c:
                    4a:a8:04:0f:4e:ae:26:9f:28:54:13:b4:49:93:65:
                    75:f8:4f:50:92:e8:19:ed:a0:d5:35:a7:7d:01:ea:
                    c0:3d:ca:6a:4a:e2:08:33:c7:e8:73:ee:1b:70:0a:
                    5b:85:64:e3:5c:75:ad:3e:73:ab:ce:77:c7:19:3c:
                    d6:4f:4c:6b:82:a8:80:6d:db:ad:c3:ab:37:e5:3f:
                    e5:e6:b7:22:0c:e1:8c:29:14:04:7d:60:aa:85:9d:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:8E:E0:67:9A:17:45:AA:74:3C:5B:65:EB:E0:B5:ED:32:05:92
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:4f:e3:26:40:ce:00:5f:fa:21:58:74:6e:8c:a5:90:aa:
         05:bf:64:3e:eb:09:39:ae:18:21:04:c8:f9:2e:82:cc:e0:ba:
         7f:98:31:e3:ed:c0:c7:0d:af:6e:d2:5f:a5:38:99:40:09:e3:
         74:c9:97:c9:a8:3e:0d:fc:3f:a6:f5:62:ed:51:e1:d8:70:bb:
         a5:d4:2f:77:95:66:bc:76:66:e1:40:59:dc:30:d3:e8:fe:00:
         0e:0e:e6:d5:81:2d:74:41:93:86:bf:f3:8b:9e:eb:01:34:4e:
         c4:4f:66:e1:94:b6:54:4f:1c:e2:27:1d:91:78:bd:c9:7a:d0:
         72:07:83:e8:0b:63:62:dd:de:23:c9:a6:e6:01:85:b6:d2:3c:
         56:d1:59:61:af:58:9d:5b:3f:7f:8e:f1:9a:a4:1f:60:16:7e:
         43:52:e9:06:68:5e:2b:58:ce:b9:8e:20:78:d3:2d:ad:73:b5:
         74:40:ae:38:d2:05:b8:1f:4f:4d:47:8e:c8:e3:7d:d3:28:96:
         af:91:47:66:0b:42:d1:cb:a5:79:7c:5f:53:59:ae:80:f6:c7:
         ef:aa:ea:90:57:87:13:1a:0c:73:e2:53:29:7e:56:e4:14:66:
         f1:e8:dc:77:b5:5b:d9:56:d6:ac:24:de:4b:c2:60:ff:16:31:
         fc:fd:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:32 2026 by rpki-client